IATSE Staff Retirement and National Pension Funds
bd_a4e83c3513331752 · schema v1 · pii pii-v1
Full breach record for IATSE Staff Retirement and National Pension Funds →I.A.T.S.E. Staff Retirement and National Pension Funds notified California residents of a data breach involving their third-party vendor, Pension Benefit Information (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer product to access PBI's servers on May 29-30, 2023, and download data. The incident was discovered on May 31, 2023. Affected data includes names and other basic identity information. PBI has patched servers, investigated the scope, and is offering 12 months of credit monitoring and identity restoration services through Kroll.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1bfad1b0d175f8c0Montana State AGfiled 2024-03-22Candidate
- bd_669936592726247dMaine State AGfiled 2024-03-22Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582913
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2024
- Raw hash
- ce2a0b848cc331067f78aea37a19b2b025f0a5e35494346276950d839fe98fcc
Reporting entity
- Name
- IATSE Staff Retirement and National Pension Fundsnorm: iatse staff retirement and national pension funds
Victim entity
- Name
- IATSE Staff Retirement and National Pension Fundsnorm: iatse staff retirement and national pension funds
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 42 weeks(296 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.